Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B8FDC036E111ECB17E116ED8A014CE.roa
File:                     05B8FDC036E111ECB17E116ED8A014CE.roa (raw, json)
Hash identifier:          DUKxyjypLRTbgLFSmahll5xZ3WGbSzpIXxY9PvbLuvA=
Subject key identifier:   82:36:CD:86:A7:00:26:02:8F:A7:D5:8A:56:BC:BE:F9:1F:B6:C4:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0BA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B8FDC036E111ECB17E116ED8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:47:44 +0000
ROA not before:           Wed 27 Oct 2021 04:47:40 +0000
ROA not after:            Thu 27 Oct 2022 04:47:40 +0000
asID:                     58895
IP address blocks:        45.206.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979 (0xba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:47:40 2021 GMT
            Not After : Oct 27 04:47:40 2022 GMT
        Subject: CN=6178d9ef-4fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:a2:85:5f:54:44:a8:df:5c:86:9e:d3:d4:
                    e6:71:14:31:86:d8:ff:cc:90:db:60:24:d8:20:20:
                    6b:08:00:9d:48:91:bf:7a:6d:cc:36:b4:97:39:c8:
                    c7:47:84:04:bb:11:2b:0b:24:4a:06:ce:4f:2f:f9:
                    09:c8:20:84:6d:e3:56:e4:9e:1f:67:89:1f:0e:67:
                    fe:1a:78:78:90:72:88:a8:c2:dc:a3:5a:74:69:6e:
                    37:77:63:1d:f4:84:5c:d7:2f:fe:a8:94:2f:0f:5a:
                    2a:ad:ee:cf:56:a1:bf:c5:98:a2:d7:0a:7b:9e:b0:
                    f2:13:04:6c:af:6d:10:3c:36:d9:ad:a9:28:52:1d:
                    a9:e5:fe:7d:3a:31:87:9e:71:63:01:52:f5:9e:c6:
                    bc:4f:48:9a:3c:67:a7:7d:e1:1c:29:44:9f:b4:41:
                    7b:16:01:ed:6f:c2:ec:00:db:15:e0:d2:e4:44:46:
                    49:40:da:6e:e4:73:56:04:a3:8a:1f:6e:ff:b0:6e:
                    77:84:f4:cb:c3:8d:21:54:f3:41:38:7b:02:35:d3:
                    30:ca:30:c3:3b:e6:82:f7:5a:c0:02:dc:6a:0d:c5:
                    bd:5c:75:1e:1e:f2:ae:1d:33:1e:98:6d:40:68:31:
                    09:7a:cb:ba:6d:55:23:b4:b0:8a:95:00:ef:29:e1:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:36:CD:86:A7:00:26:02:8F:A7:D5:8A:56:BC:BE:F9:1F:B6:C4:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B8FDC036E111ECB17E116ED8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:c1:cf:77:0c:fe:9a:9e:42:08:c2:35:78:ca:9d:c6:58:
         f5:31:d6:43:d7:08:69:1a:92:09:38:24:3e:2c:8a:fe:d7:e5:
         a2:a1:2d:84:89:51:5e:7f:93:8a:93:b3:9a:59:cd:35:af:4a:
         9e:7f:b6:7e:2a:2f:ef:83:41:cc:c5:a8:f2:fe:9a:ab:d3:27:
         2d:62:c8:e4:c9:a1:81:a7:9d:ef:05:2e:f7:9d:5b:17:49:ee:
         bc:93:d4:c6:db:6a:43:4a:89:d1:79:38:ac:a8:3e:31:24:7f:
         b3:ce:dc:1e:d5:20:6f:a8:d7:3f:26:39:30:c0:b8:04:ce:1a:
         cb:9b:04:29:f3:9a:15:9f:75:1a:a9:28:f9:4d:c1:36:8d:75:
         9b:78:aa:8e:90:c2:ed:1d:75:7c:7c:27:db:b7:ea:63:74:43:
         a7:37:41:59:9c:3e:a6:8e:a8:e3:78:71:e5:ed:3b:64:7d:58:
         46:dd:22:fe:c6:e1:82:1b:01:6d:2e:b2:9e:7d:88:c0:cf:77:
         c8:f6:82:58:c6:f1:f1:fd:74:f4:7e:bb:a8:23:ba:22:77:ad:
         d8:bb:52:3e:eb:d4:7b:6a:d4:60:3b:c3:6e:57:76:33:e6:6e:
         be:58:a6:c1:88:36:00:52:8f:6f:18:ae:56:57:55:fa:25:a9:
         4e:a6:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:16 2023 by rpki-client on console-fra.rpki-client.org